Magazine menu Close Magazine menu

Author

David Emm

David Emm is Principal Security Researcher in Kaspersky’s Global Research & Analysis Team. He’s worked in the anti-malware industry since 1990 and has a strong interest in malware, ID theft and the human aspects of security.

Latest stories by David

cyber threats business 2022

Five business cyberthreats taking center stage in 2022

  • Safer business
  • min read
    • Every year, businesses face a changing threat landscape. It pays for leaders to know what the experts think will come next. If you're upgrading your cybersecurity or looking for a new vendor, knowing what attacks are likely in 2022 will help you make the right choice. It turns out our predictions for 2021 were on the money. So what should you and your colleagues plan for this year? We're forecasting these four events that could have flow-on effects for other industries. 1.  Financial organizations will face more threats around cryptocurrency Cryptocurrency keeps growing, and people will keep investing in it for many reasons, including its anonymity, which also makes it attractive to cybercrime groups. In the scramble for cryptocurrency investment opportunities, cybercriminals will use social engineering campaigns, fabricating and selling rogue devices with backdoors to steal financial assets. More financial industry cyberthreats we'll see in 2022 2.  Fake medical documentation will trouble healthcare We saw the trade in faked medical documents like COVID-19 vaccination passports and test results in 2021. Fake vaccines were even spotted for sale on the dark web. As more countries roll out privileges alongside vaccination or test documentation, criminals will roll out more fakes. Medical-themed bait has long featured in cybercrime. With the pandemic triggering increased use of online medical services, patients watch for notifications about test results and messages from doctors. More healthcare cyberthreats likely in 2022 3.  Governments will conflict and compromise with big tech Governments are wary of big tech's growing power and data hoarding. As states build more digital infrastructure for delivering services and deeper insights into their population, they'll show more interest in what citizen data big business holds. We'll see more regulation, such as privacy and data localization laws, and regulation around how law enforcement can access data. Apple's new system that scans devices for child abuse images shows the challenges of balancing user privacy against stopping crime. More privacy predictions for 2022 4.  Industrial attacks will become more focused In many parts of the world, a rapidly snowballing trend is laser-focused attacks, particularly on Industrial Computer Systems (ICS.) We've seen increasing theft of authentication data using spyware, with each attack directed at only a handful of targets. We think these kinds of attacks will make up an even greater portion of the threat landscape in 2022, and we'll see the tactic used more widely. These attacks show why industrial shop floors must be protected. Industrial internet of things (IIoT) devices are easily overlooked and often vulnerable. More predictions for industrial cybercrime in 2022 5.  Ransomware attacks will get more targeted 2021 was a big year in ransomware, with a 30 percent growth in Ransomware 2.0, also known as double extortion. These attacks go beyond demanding a ransom to de-encrypt systems to using stolen sensitive data as leverage to pressure victims to pay up. In November 2021, the US FBI warned ransomware actors are "using significant financial events, such as mergers and acquisitions, to target and leverage victim companies for ransomware infections." At these times, any leaked information could have devastating consequences, making victims more inclined to pay ransoms. In 2022, this type of extortion will become more common. Regular, high-quality cybersecurity training for all staff is one of the best ways of avoiding falling victim to ransomware. Kaspersky is one of several organizations behind the No More Ransom initiative, providing free decryption tools and advice for ransomware victims. More on ransomware activity in 2021 As your strategic plans for 2022 take shape, improving cybersecurity will no doubt be among them. Your business must adapt as cybercriminals' ways and means change. These predictions will help you and your team be forewarned and forearmed.
cybersecurity predictions 2021

What does 2021 have in store for cybersecurity?

  • Trends
  • min read
    • Predicting the future is notoriously precarious. Who would have foreseen a year like 2020? Kaspersky's Global Research and Analysis Team reflect on this year in cybercrime and deduce what we should expect in 2021. Leaked patient records and COVID pressures in healthcare 2020 was the year everyone had a vested interest in new medical technologies' success. Cybercriminals attacked medical devices, hospitals and research institutions, intent on stealing COVID-19 vaccine insights. We also saw the first known directly fatal cyberattack: A patient died because ransomware infection of medical equipment caused care delays. Other cybercrime groups surprised us by ruling out attacking medical institutions. The cybersecurity community set up CTI League: Experts helping medical organizations respond to cyberthreats. Kaspersky gave healthcare organizations free access to tailored cybersecurity. In 2021, expect more attacks on COVID-19 vaccine developers attempting to steal critical data that could help other nations get ahead. Private healthcare organizations will further come under attack, as many don't have the resources to protect valuable patient data. With the transition to cloud computing, we may see patient data leaks from cloud services. Criminals can use personal data in hacked medical records to dupe people into revealing more. More healthcare industry cybersecurity predictions for 2021 Cybercriminals have learned about industrial networks Attacks on industrial networks will become more targeted. By watching randomly infected machines, cybercrime groups have learned organizations' IT setup and know how to exploit it. They can then on-sell network access to more sophisticated cybercrime groups who will take control of finance systems to steal cash. As many industrial control systems (ICS) use old operating systems, the end of support for systems like Windows 7 creates an exploitable loophole. We could see another significant, multi-industry crime campaign like WannaCry. As utilities and government services go through digital transformation they're more vulnerable to attack. Cybercriminals can use a government service as an entry point into industrial systems to disrupt services like public transport. In 2020, COVID-19 restrictions on working on-site delayed IT-system upgrades. During an attack, it may be harder for IT admins to regain system control quickly. Basic malware could spread and become more serious. Upgrading endpoint security and training workers are vital. More industrial cybersecurity predictions for 2021 Online education revolution brought new threats Education changed abruptly in 2020. 1.5 billion students took classes from home. Educators had to learn new skills, like running a class on Zoom or using TikTok lessons. For those who can access the technology, these new services enhance education. But they come with new threats. Learning management systems (LMS) like Google Classroom are exploding. And with growth comes cybercrime. We saw a staggering 20,000 percent growth in threats to online learning platforms between 2019 and 2020. Privacy usually involves getting the user's consent, but a child can't easily manage their privacy settings. Video will keep growing as a learning tool. About 60 percent of teachers use YouTube in the classroom. There's increased risk of exposure to age-inappropriate content, and new threats like Zoombombing could expose learners to harmful content. Games like Minecraft are a great way to make learning more interactive but exposes students to risks like cyberbullying, trolls and malicious files. Teachers must moderate content in their learning management systems, but with the popularity of social platforms and games for pupil engagement, the challenge has leveled-up. More education cybersecurity predictions for 2021 Poverty driving more financial cybercrime in 2021 In 2021, financial companies became less secure thanks to due hastily deployed remote working solutions. Some bought retail laptops that didn't match the security standards of the organization. Limited employee training, default configurations and remote access all contributed to increased attacks. There's rising extortion using distributed denial of service (DDoS) and ransomware. Targeted ransomware is the new normal for financial organizations. Criminals increased ransoms, emboldened by successful attacks and media coverage. To cover their tracks, they'll now expect you to pay in cryptocurrencies. People are often the weakest link, like in the failed attempt to infiltrate Tesla. Stay at home orders didn't affect cybercriminals: Brazilian cybercrime groups went global in 2020, expanding to Europe and beyond, including attempts to hack ATMs. Bigger crime groups are evolving their business models to boost profits by hiring more people within their virtual walls rather than outsourcing. To crack down on cybercrime, the US Department of the Treasury's Office of Foreign Assets Control warned of sanctions for organizations facilitating ransom payment. Next, we predict sanctions against institutions and nations that don't combat cybercrime coming from their territory. More financial cybersecurity predictions for 2021 Crime gangs collaborating on advanced threats Advanced persistent threats (APTs) are the most dangerous kind of attacks, often seen in geopolitical clashes, intent on harming national interests. With the trend towards improved organization security and more people working from home, crime groups will exploit network technologies such as virtual private networks (VPNs,) using social engineering to get access. 5G is big news, with bogus stories of health risks and some nations limiting or banning Huawei products in their 5G infrastructure. Security researchers are examining Huawei and other 5G providers for implementation flaws. If found, they'll make the front pages. As more devices depend on 5G for connectivity, attackers will have more incentive to seek vulnerabilities to exploit. As ransomware becomes the weapon of choice for many criminals, we may see ransomware players' concentrate. In 2020 the Maze and Sodinokibi gangs pioneered an affiliate collaboration model. These bigger groups may combine to deliver APT-style attacks that overwhelm a target organization's system, to access specific data. We'll likely see attacks like these disrupt everyday lives. It could be an intentional attack on critical infrastructure like utilities or collateral damage from ransomware targeting big organizations we all rely on, like supermarkets, mail or public transport. More advanced threat predictions for 2021 Threats may be increasing, but fortunately, there's better education, technology and intelligence available today to help your organization stay secure and face the future.
Security Awareness

How to build a better cyber-aware culture at work

  • Small business
  • min read
    • Your employees are one of the biggest risk factors when it comes to your business and cybersecurity. You can lecture them, make them take online tests, even install software on their machines, but one rogue click on a phishing email could cost your business dearly. The answer: build a robust cybersecurity awareness culture to keep your business safe. When was the last time you inspired your employees about cybersecurity? You might've given a presentation, or delivered a series of online tests for people who, most probably, didn't pay it their full attention. Ask yourself, if you said "cybersecurity awareness session," would employees A: be excited and engaged, B: see it as a chance to switch off, or C: be more worried about pressing deadlines to pay full attention? If you answered A, well done – you're already building a cyber-aware organization. If you answered B or C, you need to change the dynamic from one-off training to a more embedded cultural of cyber-awareness. Culture, not lectures I worked at a firm years ago, one of their biggest rules: the phone never rings a fourth time. So for every member of staff, as soon as we stepped into that office, we knew the drill. And nobody had to teach new members of staff to do it – they could see for themselves what was expected of them. We just did it instinctively. It was part of our culture which became a habit. Think of cybersecurity best practice like clearing out your cupboards – you do it once, but inevitably you'll need to repeat it on a regular basis. Or to get more specific, it's like putting anti-virus software on a computer and never updating it. Strong cybersecurity cultures aren't built on one-off lectures about how dangerous the cyber-world is, they're built on engagement and habit. How to engage your employees and protect your business Firstly, if you have the funds, invest in IT talent. By appointing someone who's in charge of protecting your business, monitoring threats and educating your staff, your business will be better equipped to deal with cyberattacks. And make sure your IT teams have the training in threat intelligence and the right technologies in hand to spot and act on threats. But what if you're a small medium-sized businesses (SMB) with limited resources, and perhaps none or few dedicated IT specialists? Think bite-sized: small, but frequent. As you build momentum in the office, people will become more aware of what you're trying to do. For example, a poster with five ways to stay cyber-safe will catch people's eyes if you put it somewhere public, like the kitchen sink – next to your other safety at work signs. Or think about your procedures. As spear phishing emails – in which hackers assume the identity of a member of your staff – become more prevalent in targeted attacks. Giving multiple people the responsibility to sign off financial transactions, could stop identity thieves in their tracks. Rewarding colleagues and employees can go a long way too. Who has reported the most phishing emails, for example? A gift voucher prize should keep everyone keen to report them. And while you're at it, encourage other more security awareness practises in the workplace, like questioning when unknown people are in the building, and avoiding digital clutter like confidential information on the printer or unsecured data sticks. Ultimately, the most effective way to build a better cybersecurity culture is regularity. My top tip: run short activities often – lessons, tests, simulations, even treasure hunts or a meeting room transformed into a 'cyber-escape room' for the day. Frequently give employees a digestible amount of information. They'll get small enough bites of information to integrate into their daily work while building a foundation for a strong cybersecurity culture. The result? Stronger protection for your business. For more tips on security awareness and workplace cybersecurity best practise, read an interview with Barton Jokinen, Kaspersky's Head of Information Security and Compliance for the Americas.
autonomous vehicles

Driving change: Will autonomous vehicles be safe to use?

  • Opinions
  • min read
    • The Department for Transport in the UK recently claimed it wants to see fully autonomous cars tested on British roads by 2021. Astonishingly, this expectation was set out after several fatal crashes in Arizona, USA. A legacy system risk The communications infrastructure used in cars today (known as a Controller Area Network, or CAN) was designed back in the 1980s. It was developed for exchanging information between different microcontrollers. Essentially, what we have is a peer-to-peer network – and an old one at that. The main issue here is that these networks weren't built with security in mind, as it wasn't a key concern back then. As time has progressed, new functionality has been layered on top of existing functions, all connected to the CAN. This offers no access control or security features but instead leaves vehicle access potentially open to criminals. While there are no real-world hacks that have been executed this way, it has been proven to be possible. For example, in 2015 two researchers and a journalist were able to use wireless technology to drive a Jeep Cherokee off the road. As a result of this flaw, half a million cars were recalled. It's an example of emerging technologies being layered on top of old infrastructure, without fully considering the security implications. Potential security issues don't just lie in the underlying communications network of the car itself; there's also the possibility of an attacker infecting a driver's smartphone and hijacking any apps they use to control functions on the car – for example, to lock and unlock it. Cars need humans too Following the fatal incident in Arizona last year, experts predicted that it would be many years before autonomous cars replace human drivers. The reality is, I don't think driverless cars will or should ever replace human drivers in the way that we think of them doing so now. In the future, I think everyone will continue to drive a private car, but it will be self-driving. However, the issue of how we implement the technology is something for society to ultimately decide – whether this takes the form of private vehicles or a co-ordinated public transport system – but I do not believe either should remove the human aspect of driving vehicles. The risks of delegating control I think people are becoming more apprehensive when it comes to driverless cars, where safety is paramount, and rightly so. Historically, driving has always been an aspect of life where human control has been essential, so the idea of watching a film or sleeping while a car transports us feels understandably 'wrong' to many people. There are various levels of autonomy with self-driving cars – ranging from add-on features such as parking assistance through to completely driverless cars. A 'grey area' lies between the two, where the driver has very little to do, but has responsibility for the vehicle and might need to take control at some point. In the latter scenario, there's a danger that the driver may switch off because they don't feel required to be in full control and might be unable to regain control in an emergency. Driverless car fatalities have shown that there is a very real danger with autonomous vehicles, and it's reasonable to question whether it's wise to resume the use of them so quickly after the incident. Safety first There are concerns about pedestrian and driver safety – as recent stories surrounding autonomous car testing have demonstrated, which society needs to tackle before driverless cars are launched. There's also a moral or ethical issue to consider. Christian Wolmar raised the issue of 'the Holborn problem': if driverless cars are programmed to stop when they sense a pedestrian, what happens when they're confronted with a mass of people milling across a busy road?  Will they wait all day? Or will they be programmed to operate with a lower safety bar? Or if the car is given the chance to choose to avoid hurting pedestrians or the passenger in the car in the lead-up to an accident, how and who will it choose? A car isn't able to make moral-based decisions on its own. Ethics aside, in terms of cybersecurity, it's important to remember that nothing is 100 percent secure. Just like housework, security is never 'done' – you need to continually repeat the process of vacuuming and dusting as it will be back next week. This same logic applies to securing the increasingly advanced technology in cars today. A recent audit by Kaspersky of connected car devices revealed several security issues, including the option to manipulate signals from the tire monitoring system and, alarmingly, the ability to open vehicle doors using the alarm system. Collaborating for a secure future Undoubtedly, autonomous cars – like the Uber you've just ordered – are just around the corner for motorists. So what does this mean for the automotive industry?  'Safety first' is not just a buzzword – it's essential to consider at the design stage. Just relying on software upgrades that are connected to the car's hardware to mitigate risks will not work in the era of IoT when absolutely everything is digital and connected. Devices need to be secure by design, and at the point of manufacture. Collaboration between smart car manufacturers and cybersecurity experts is essential to establish standards in this emerging discipline. For example, Kaspersky collaborated with manufacturer AVL to create a Secure Communication Unit (SCU) to secure communications between car parts, and between connected cars and infrastructure. This is a true secure-by-design software that will protect people, both on and off the road. There are still many unanswered questions and unconsidered scenarios, which regulators, the industry and society as a whole need to ascertain before we can start to consider loosening the reigns on bringing autonomous cars safely to our roads. This article was first published in March 2019, SC Magazine.
by Innovating leaders.
Innovative tech.
About Secure Futures

Secure Futures magazine is your go-to business guide for opinions, trends and insight into the world of technology and cybersecurity. We help your business to bring on the future. Brought to you by Kaspersky, the global cybersecurity experts.

  • For all other countries